Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier: Hj7pONwwvLqAXDxiRXR9H+T3/Q37G+HExDX/Wiehqh8=
Subject key identifier: BF:1B:21:41:AB:D1:29:EB:EA:55:C7:EA:DF:F3:16:70:AC:76:13:21
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 019CAAFD4F81112CB413FC410020065EC983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number: 0437
Signing time: Sun 01 Mar 2026 20:00:53 +0000
Manifest this update: Sun 01 Mar 2026 20:00:53 +0000
Manifest next update: Mon 02 Mar 2026 20:00:53 +0000
Files and hashes: 1: 1-oF-we2cmHSHaID5tDY175ejYyc.roa (hash: dJ5RifzmXnjb10Iv95+voBaC+89de9KOSKWwWpiVAmQ=)
2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: z4bPq+rO+HDJfqd/0WurT2kqhp6E/fVCpLV2bhh1LWo=)
3: tSi7rgFlmfh1P4HXVwQwVPU47ak.roa (hash: a+hi0S0VRR6DQeW+YfoSxvunfpCb33mxDCeififJ5+A=)
4: wOsJVEziUaOvFA1iNE3ry9kPQfE.roa (hash: FAa7Ewjlb7OE+5koslUqaQRcv1OSsbCB7gnK+sa/8FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:4f:81:11:2c:b4:13:fc:41:00:20:06:5e:c9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: Mar 1 20:00:53 2026 GMT
Not After : Mar 2 20:00:53 2026 GMT
Subject: CN=bf1b2141abd129ebea55c7eadff31670ac761321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:93:e2:64:f8:c2:e4:51:14:f8:be:58:42:
65:85:4c:44:26:e1:bc:4e:d4:7e:87:82:a1:e0:27:
24:db:a6:e3:32:e5:17:81:b9:b5:e6:21:06:53:d1:
2f:9a:fd:84:a3:4c:90:27:1a:cc:56:4a:30:f7:52:
a7:68:ea:b0:c8:05:9c:cc:16:7e:3c:a5:c1:df:0b:
9e:ff:da:ad:b3:65:d9:cc:3c:26:81:9e:a6:ea:a1:
38:83:7d:64:93:a5:0e:c2:79:68:f6:04:2d:f0:b4:
6d:8a:02:ad:e9:23:dd:4a:20:18:6b:e1:93:74:2e:
16:21:4f:f1:e9:0e:07:67:bd:ab:d5:15:77:c4:2a:
35:b5:6f:85:94:c8:b3:cb:e6:79:1a:e2:a4:1e:b3:
e9:b8:19:4d:2e:83:33:a4:86:40:4a:34:20:cf:5e:
3c:71:77:9e:21:7d:48:7a:c5:be:4c:ac:86:f7:e6:
23:eb:72:db:d3:0e:3d:4d:f4:c0:eb:9b:04:5a:d4:
9f:68:fe:69:e6:cf:da:18:f5:e9:1a:b7:9c:a6:d1:
3a:86:c5:39:5b:76:9a:a3:d1:85:a0:b4:3d:8e:29:
32:3b:03:cc:ae:65:32:62:75:a8:f6:2c:5e:22:53:
4a:14:af:2e:90:ad:a1:9c:1c:63:ed:64:a6:bb:c7:
55:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1B:21:41:AB:D1:29:EB:EA:55:C7:EA:DF:F3:16:70:AC:76:13:21
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d5:35:fd:04:52:dd:f4:99:3e:1c:35:f7:6d:28:95:38:60:
05:6f:f0:bf:bf:43:06:0a:24:c1:f7:e1:5e:1b:2e:1d:d8:e9:
4d:f4:9a:8f:8d:5d:14:16:15:b6:8f:ff:f2:ba:dc:21:d6:01:
e3:1a:52:d0:02:9a:20:65:0f:37:60:37:f5:69:1f:08:b3:40:
b5:92:0e:66:a3:65:6a:34:12:21:cb:25:5b:e1:14:17:f7:84:
9d:ed:f7:32:a8:e6:0c:1b:d8:1b:cf:f9:64:52:5f:c1:0f:11:
de:80:6a:e8:cc:b9:cb:74:ce:c3:44:99:bd:45:c0:c4:91:bc:
d1:fe:82:56:4b:61:72:09:53:62:ca:2e:64:c5:83:c8:6a:cc:
79:bf:23:fd:a9:30:9e:61:60:75:c1:01:15:bd:d9:0d:be:5f:
2e:62:db:bc:9a:22:c0:d7:b2:50:47:6c:21:93:78:4f:5b:dc:
0f:70:d1:ab:a1:f6:62:12:f9:65:1a:c3:db:b3:19:e1:57:8b:
3a:9b:7f:81:79:45:ac:f1:58:d7:76:f9:99:22:88:c4:50:9b:
d5:8f:aa:8f:72:fc:66:42:4e:1b:ef:26:41:b7:0a:f8:05:a5:
77:7c:9d:3b:31:5f:ad:2c:58:c4:35:8c:f0:1b:ef:4e:44:d5:
01:b2:a9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:49 2026 by rpki-client